Active Directory

Active Directory Assessment

Domains

Domain account SID resolution

This ActiveRoles Server reportresolves specific SIDs to their account names. By default, it shows SIDs forall domain accounts. A SID is a unique string of characters assigned to a user,group, computer, or domain.

For domain accounts in Windows2000 and later, SIDs are unique per forest, since SIDs of domain accounts(users, groups, or computers) include a SID assigned to the domain in whichthey are created.

The remaining part of a SID,which is unique for each domain account (RID).

Domain Summary

This ActiveRoles Server reportshows the domains in your environment. For each domain, the followinginformation is provided: description, canonical name, operations mode, dates ofcreation and last change,

and statistical data on thenumber of accounts of different types that the domain includes.

Domain Trusts

For each included domain, thisreport shows which domains trust it and which domains it trusts.

Group Membership

Group Membership by Group

This report shows ActiveDirectory group membership. How the report determines membership depends on thesetting of the Membership Type. By default, for each group only those accounts are shown that are its direct members.

However, if you select Full (consodering nested groups), then the report also shows membership through nested groups. In this case, you can click Granted through nested groups to view groups through which the membership is inherited.

Group Membership by User

For each displayed user account, this report shows the Active Directory groups that the user is a member of. In the Group Membership filter, you can select whether you want toview groups that include the user only as a direct member or as s member of a nested group as well.

Users with domain administrative rights

This report shows the domain administrators in your Active Directory domains. Users that are members of a domain’s built-in Administrators group or groups nested within it are considered domain administrators.

Groups

Domain group statistics

This report shows how many groups of specific types and scopes there are in each domain. Click a number in the report to view the groups of a particular type and scope.

Note. Universal groups are shown in the domains where they were created.

Empty Groups

This report shows groups in your Active Directory with no members in them. Keeping such groups in the directory usually makes no sense, and they should be removed.

Group Hierarchy

This ActiveRoles Server report shows the nesting of your Active Directory groups and represents it in a tree-like list. Using the Group Types filter, you can specify whattop-level groups with their nested groups are included.

Group list with member statistics

This report lists your Active Directory groups and shows statistics on their members. For each group ,the report displays the number of directly included accounts (users, groups andcomputers). It also shows the total number of users that are members of the group both directly and by virtue of membership in nested groups.

Attachments

(Please visit the site to view this file)